Hello,
I have a two questions about permissions/security when installing SQL 2012.
I have just installed SQL 2012 SP1 on a clean install of Windows 2012 (only UAC was disabled) and I've got two questions about some unexpected behavior regarding permissions/security (maybe what I'm seeing is normal but I'm new to SQL and I wasn't expecting this)
I created 3 additional drives for user data, logs and temp db. I did not touch permissions in any way. During the install I changed the drive letters accordingly (leaving the rest of the path as is). I also set the sql server admins to BUILTIN\Administrators (and selected mixed mode authentication). The accounts to run the various sql components were left at their defaults (eg. NT Service\MSSQLSERVER)
My active directory account is a member of an active directory group that is part of the local admins groups on the sql machine.
What I don't understand is why, when I try to browse via the windows desktop/explorer to the data on these additional drives, do I receive an error saying I don't have access and to click here to get access. I can drill down the folder structure just fine but when I try to open the last folder (called data), it always gives me that error. If I go there via the network (\\server\L$\program files\....) I can access it just fine and modify the contents.
Is this normal? Would things be different if I just left everything at the default of the C drive? It seems the only account that can browse to the data folder on the machine is the local Administrator account. Not even other local admin accounts have access. Did I mess something up during the install or is this what is expected? (Seems to affect what I can/can't browse in management studio as wel)
My other issue is with the management studio app. After the install I tried to login to the DB using windows authentication and I got access denied for my domain account. Using the sa account I was able to get it. I saw builtin\administrators listed couldn't login locally. From another computer running management studio (from sql 2008 or 2008 r2), I was able to connect to the database . (I thought this wasn't even possible by default). When I added the domain group to the list of logins in sql management studio, then I could login locally on the sql server with my domain account. Again, is this expected?
Thanks
I have a two questions about permissions/security when installing SQL 2012.
I have just installed SQL 2012 SP1 on a clean install of Windows 2012 (only UAC was disabled) and I've got two questions about some unexpected behavior regarding permissions/security (maybe what I'm seeing is normal but I'm new to SQL and I wasn't expecting this)
I created 3 additional drives for user data, logs and temp db. I did not touch permissions in any way. During the install I changed the drive letters accordingly (leaving the rest of the path as is). I also set the sql server admins to BUILTIN\Administrators (and selected mixed mode authentication). The accounts to run the various sql components were left at their defaults (eg. NT Service\MSSQLSERVER)
My active directory account is a member of an active directory group that is part of the local admins groups on the sql machine.
What I don't understand is why, when I try to browse via the windows desktop/explorer to the data on these additional drives, do I receive an error saying I don't have access and to click here to get access. I can drill down the folder structure just fine but when I try to open the last folder (called data), it always gives me that error. If I go there via the network (\\server\L$\program files\....) I can access it just fine and modify the contents.
Is this normal? Would things be different if I just left everything at the default of the C drive? It seems the only account that can browse to the data folder on the machine is the local Administrator account. Not even other local admin accounts have access. Did I mess something up during the install or is this what is expected? (Seems to affect what I can/can't browse in management studio as wel)
My other issue is with the management studio app. After the install I tried to login to the DB using windows authentication and I got access denied for my domain account. Using the sa account I was able to get it. I saw builtin\administrators listed couldn't login locally. From another computer running management studio (from sql 2008 or 2008 r2), I was able to connect to the database . (I thought this wasn't even possible by default). When I added the domain group to the list of logins in sql management studio, then I could login locally on the sql server with my domain account. Again, is this expected?
Thanks